Privacy policy

Who we are

Digital Roots is run by Javier Jaramillo and José Duque. We work together as self-employed professionals and are jointly responsible for your data. You can reach us at [email protected].

What we collect and why

• Analytics, only if you accept. Google Analytics 4 shows us which pages are visited and which steps of the booking and Health Check people complete, with device, browser and approximate location. It never includes your name or email. Legal basis: your consent.
• Website Health Check. We store the website you scanned, its result and a scrambled (hashed) version of your IP address to prevent abuse. If you ask for the report by email, we also store your email and your answers on the form, and send you the report. We only follow up if you tick the box. Legal basis: providing what you asked for; preventing abuse; your consent for the follow-up.
• Booking a call. Your name, email, notes and chosen time, used to send you a Google Calendar invitation with a Meet link. Legal basis: arranging the call you asked for.
• Security. Cloudflare Turnstile checks that a person, not a bot, is using our forms, based on your IP address and browser details, and our server briefly holds your IP address in memory to limit requests. Our hosting provider may keep standard access logs. Legal basis: keeping the site secure (our legitimate interest).

We don't sell your data and don't use it for advertising.

Who else sees it

• Google: Analytics (only with your consent), Calendar and Meet.
• Mailgun: sends Health Check reports by email.
• Cloudflare: runs the security check on our forms.
• Our hosting provider: runs the website and its database.

They only process data on our behalf. Google, Mailgun and Cloudflare are US companies and part of our team works from Ecuador, so data may be handled outside the EU. When it is, it's protected by the European Commission's standard contractual clauses or the EU–US Data Privacy Framework.

Cookies

Analytics cookies are only set after you click “Accept analytics”. You can change your mind at any time with “Cookie settings” in the footer, and we'll delete them.

Cloudflare's security check may store what it strictly needs to work, and when you book a call your details are kept in your browser until the confirmation page shows them.

How long we keep it

• Your cookie choice: 6 months, then we ask again.
• Analytics data: 2 months.
• Health Check scans and email requests: 12 months. The scrambled IP address is removed after 30 days.
• Booking details: 24 months after the call, unless we start working together.
• Server access logs: 14 days.

Your rights

You can ask us to see, correct, delete or export your data, or to stop or limit how we use it, and you can withdraw your consent at any time. Email [email protected] and we'll reply within one month.

You can also complain to the authority where you live or work.

Changes

If the site starts collecting something new, we'll update this page and the date above.